Vulnerability Development mailing list archives
RE: Win32.Sircam.Worm Alert.....
From: "Obert, Jack E." <JObert () sprg smhs com>
Date: Wed, 25 Jul 2001 09:15:00 -0500
It is my understanding that SirCam will look through the html code in your internet cache directory to pick out e-mail addresses... This may not be an intentional distribution since people regularly access their corporate sites and referenced on those sites are the mail addresses listed below... Jack E. Obert, GSEC Technical Information Security Officer St. John's Health System -----Original Message----- From: Tom Geldner [mailto:tom () xor cc] Sent: Tuesday, July 24, 2001 11:35 AM To: 'Johnson, Greg'; vuln-dev () securityfocus com; SECURITY-BASICS () securityfocus com Subject: RE: Win32.Sircam.Worm Alert.....
-----Original Message----- From: Johnson, Greg [mailto:JohnsonG () missouri edu]
Don't let the e-mail tip-off fool you. In our University environment we find this and related worms spread primarily via unprotected writeable Windows shares. It also gets in when a user without up-to-date anti-virus software accesses an e-mail server other than our own which has an anti-virus filter. Bim-ba-boom!
Some of our corporate accounts have been pounded on by a particular user on verizon.net. None of those e-mail addresses are from someone's address book. They are all things like info@, webmaster@, postmaster@ etc. so in our case, someone seems to be trying to propogate it deliberately. Tom
Current thread:
- RE: Win32.Sircam.Worm Alert....., (continued)
- RE: Win32.Sircam.Worm Alert..... Jeremy Rodriguez (Jul 25)
- Re: Win32.Sircam.Worm Alert..... Nicolas Gregoire (Jul 25)
- Re:Sircam Kimberly Anne McKinnis (Jul 26)
- RE: Sircam Dom De Vitto (Jul 26)
- Re: Win32.Sircam.Worm Alert..... Kimberly Anne McKinnis (Jul 24)
- Re: Win32.Sircam.Worm Alert - Report from Argentina Mariano Vassallo (Jul 25)
- RE: Win32.Sircam.Worm Alert..... Arturo "Buanzo" Busleiman (Jul 25)
- RE: Win32.Sircam.Worm Alert..... Eric D. Williams (Jul 25)
- Re: Win32.Sircam.Worm Alert..... Nicolas Gregoire (Jul 25)
- Re: Win32.Sircam.Worm Alert..... Bruno Lustosa (Jul 25)
- RE: Win32.Sircam.Worm Alert..... Obert, Jack E. (Jul 25)
- Re: Win32.Sircam.Worm Alert..... Peter Gutmann (Jul 25)
- RE: Win32.Sircam.Worm Alert..... Kyle Plate (Jul 26)
- RE: Win32.Sircam.Worm Alert..... Chris Freels (Jul 26)
- Re: Win32.Sircam.Worm Alert..... DNT (Jul 27)